CVEs published July 22, 2023
17 CVEs were published on July 22, 2023: 0 critical, 0 high.
- Published
- 17
- Critical
- 0
- High
- 0
- Medium
- 4
- Low
- 11
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Bug Finder Listplace Directory Listing Platform
- 2
- IBM Cognos Analytics
- 2
- Bug Finder EX-RATE
- 1
- Bug Finder Finounce
- 1
- Bug Finder ICOGenie
- 1
- Bug Finder MineStack
- 1
- Bug Finder Montage
- 1
- Bug Finder SASS BILLER
- 1
- Bug Finder Wedding Wonders
- 1
- Dahua Smart Park Management
- 1
Medium, low and unrated 17
- CVE-2023-3837DedeBIZ sys_sql_query.php cross site scriptingDedeBIZ
- CVE-2023-3836Dahua Smart Park Management unrestricted uploadDahua Smart Park Management
- CVE-2023-3835Bug Finder MineStack Ticket create cross site scriptingBug Finder MineStack
- CVE-2023-3834Bug Finder EX-RATE Ticket create cross site scriptingBug Finder EX-RATE
- CVE-2023-3833Bug Finder Montage Ticket create cross site scriptingBug Finder Montage
- CVE-2023-3832Bug Finder Wedding Wonders Ticket create cross site scriptingBug Finder Wedding Wonders
- CVE-2023-3831Bug Finder Finounce Ticket create cross site scriptingBug Finder Finounce
- CVE-2023-3830Bug Finder SASS BILLER store cross site scriptingBug Finder SASS BILLER
- CVE-2023-3829Bug Finder ICOGenie Support Ticket create cross site scriptingBug Finder ICOGenie
- CVE-2023-3828Bug Finder Listplace Directory Listing Platform Photo coverPhotoUpdate cross site scriptingBug Finder Listplace Directory Listing Platform
- CVE-2023-3827Bug Finder Listplace Directory Listing Platform HTTP POST Request create cross site scriptingBug Finder Listplace Directory Listing Platform
- CVE-2023-3826IBOS OA Interview edit&op=status sql injectionIBOS OA
- CVE-2023-3247Missing error check and insufficient random bytes in HTTP Digest authentication for SOAPPHP Group PHP
- CVE-2023-28530IBM Cognos Analytics cross-site scriptingIBM Cognos Analytics
- CVE-2023-25929IBM Cognos Analytics cross-site scriptingIBM Cognos Analytics
- CVE-2023-38195Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory.
- CVE-2023-38633A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on t